Suspect
e7ee4c55f86c1d672f60ecbefad4f8cd
VBScript
MD5: e7ee4c55f86c1d672f60ecbefad4f8cd
Size: 4.6 MB
text/vbscript
This sample is a 4.4 MB VBScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 3 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 0feb4ec940170983ccd226e13006446c3dc78f6b2278115ac3d1097c2f831fcd
- MD5
- e7ee4c55f86c1d672f60ecbefad4f8cd
- Verdict
- Inconclusive
- File type
- VBScript · 4.4 MB
Cite this report: https://app.malva.re/sha256/0feb4ec940170983ccd226e13006446c3dc78f6b2278115ac3d1097c2f831fcd
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
4.6 MB · 4,599,912 B
Hashes
MD5
e7ee4c55f86c1d672f60ecbefad4f8cd
Sha1
047f0c714c70058250d0296f39e0fa076af11d4c
Sha256
0feb4ec940170983ccd226e13006446c3dc78f6b2278115ac3d1097c2f831fcd
Sha384
b4328dc9e542932f47ace8ebd1f61c71c22be8cb53d00b73bc65ebaa1a077403a9e3d18a001013fab5c31f8bac773bd4
Sha512
4d5413a6407d13ad4869c1109ef32bb23c447ef2d9680887431fb1210230faca3ec59039f2402ce5ba5ba301faef1421a6487dd4fa7ce987e79f170943db8c39
SSDeep
49152:uhXH9ktlxeRwpD9n+jtIQwvEPXHP5he6/6:uhtkTwRwpD9n+twsPX+
TLSH
1426281525C64227F4E705BEEB18B309DFADB4152FECF75FD15049BBAC220A2896027B
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLL
4 files
VBSe7ee4c55f86c1d672f60ecbefad4f8cd
Structure
P7B[Authenticode]_3205fb45.p7b
BINOverlay_ad08f0f5.bin
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
STICH
beta
No STICH Path has been generated for this analysis yet.
2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
2| Name | Value |
|---|---|
| Info | Authenticode present at 0x461000 size 7272 bytes |
| Info | Overlay extracted: Overlay_ad08f0f5.bin (1024 bytes) |
4 files
VBSe7ee4c55f86c1d672f60ecbefad4f8cd
Structure
P7B[Authenticode]_3205fb45.p7b
BINOverlay_ad08f0f5.bin
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account